Pump.fun pauses trading after apparent flash loan attack

Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading

article-image

Dall-e modified by Blockworks

share

Pump.fun was attacked Thursday by an exploiter who seemingly used flash loans to buy out the bonding curve. 

In a post on X, Pump.fun said that it was “aware” that the contracts were compromised and were investigating. 

“We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe,” the team said. “We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”

Igor Igamberdiev, head of research at Wintermute, analyzed the situation in a series of posts on X, saying that the key was compromised, “though the possibility of an inside job remains.”

Loading Tweet..

Igamberdiev said that the amount lost by Pump.fun is “at least” 12,000 SOL, or roughly $2 million.

An account on X going by Stacc seemed to take credit for the attack, writing “I’m about to change the course of history” in a post

Stacc seemed to imply in his posts that he didn’t intend to keep the stolen funds, but rather planned to transfer the “remaining balances of bonding curves” to some token users. 

Loading Tweet..

It’s not clear as of publication how Stacc was able to execute the attack, or if they’re distributing the balances to random people. 

As Blockworks previously reported, Pump.fun lets developers launch tokens without seed liquidity for a couple of dollars. Its revenue comes from users buying and selling tokens. 

Tokens that exceed market caps of $69,000 can then be listed on the Raydium DEX. 

This is a developing story.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Permissionless is a conference for founders, application developers, and users. Come meet the next generation of people building and using crypto.

recent research

Blinks Report Image.png

Research

Blinks enable the ability to vampire attack user monetization of existing networks by inserting onchain and financialized functionalities directly within the popular social feeds and digital experiences of today.

article-image

Plus, how the FTX collapse played out in Asian countries

article-image

Kalshi founder Tarek Mansour said Thursday marked the “the first trade on regulated election markets in nearly a century”

article-image

I was excited about being on the precipice of realigning societal incentives and solving many issues plaguing our modern financial world

article-image

Cypherpunk Holdings has rebranded to Sol Strategies in a pivot to a Solana-first investment approach

article-image

BitGo’s wrapped bitcoin (wBTC) has a new custodial challenger

article-image

Make no mistake: Tether makes a ton of money. But exactly how much depends a lot on the price of bitcoin.